Alauda DevOps Artifact Hub Shim Docs

Release Notes

TOC

Integration Requirementsv1.0.0Features and EnhancementsFixed IssuesKnown Issues

Integration Requirements

Artifact Hub Shim is installed as an ACP cluster plugin. Tekton resolver and Pipelines as Code integration require Alauda DevOps Pipelines v4.0 or later.

v1.0.0

Released on August 17, 2026, v1.0.0 is the first generally available release of Artifact Hub Shim.

Features and Enhancements

Offline Catalog Service

  • Provides an Artifact Hub-compatible API for Tekton Task, Pipeline, and StepAction resources without requiring internet access.
  • Packages the built-in ACP catalog and its referenced tool images for offline plugin delivery.
  • Supports original and normalized semantic versions, latest-version selection, catalog aliases, disabled packages, and source-conflict isolation.

Custom Catalog Sources

  • Loads additional catalogs from Git repositories declared through labeled Kubernetes ConfigMap resources.
  • Supports HTTPS credentials, SSH credentials, private CA certificates, cross-namespace source discovery, optional sources, and last-valid snapshot behavior when a refresh fails.

Tekton and DevOps Integration

  • Serves the Artifact Hub endpoints used by the Tekton hub resolver and Pipelines as Code.
  • Serves authenticated Hub-compatible APIs used by the ACP DevOps UI.
  • Supports global, project, namespace, and explicit-namespace repository visibility, including local resolver admission checks.

Catalog Extensions

  • Synchronizes explicitly labeled extra ConfigMap resources into approved namespaces with ownership, conflict, prune, and keep-policy controls.
  • Provides an optional webhook for catalog mail and execution-overview template rendering.

Operations and Security

  • Provides health, readiness, and per-source snapshot-status endpoints.
  • Supports IPv4, IPv6, dual-stack, restricted Pod Security defaults, and multi-replica API deployment with pod-local storage.
  • Integrates UI-compatible endpoints with ACP or Kubernetes request authentication and SubjectAccessReview authorization.

Fixed Issues

  • Before this update, periodic synchronization of Git-backed catalog sources could accumulate zombie processes and eventually cause catalog source refreshes to fail. With this update, Git subprocesses are properly reaped, so catalog source refreshes no longer fail because zombie processes accumulate.
  • Before this update, when a Pipeline ran multiple chart-build-push@0.2 Tasks concurrently against a shared source workspace, a chart package could be pushed to the wrong OCI path, causing the chart content in the registry to mismatch the expected chart name. With this update, concurrent TaskRuns push their own chart packages to the correct OCI paths, keeping the stored chart content consistent with the expected chart names.

Known Issues

No issues in this release.